Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/192bba-1a74-4ba4-90d6-72c4c4b804a7/1/gzdbQ66KU9SMiIZx5n_Be_J_K34.mft
File: gzdbQ66KU9SMiIZx5n_Be_J_K34.mft (raw, json)
Hash identifier: KKLMCeXcdlZ9ee4eWgohPI4nsPR5vERvYYpKGo6oEOE=
Subject key identifier: B3:9A:BE:90:8A:E1:B3:AF:E1:4B:4B:7F:AE:00:52:B6:EB:E9:60:79
Authority key identifier: 83:37:5B:43:AE:8A:53:D4:8C:88:86:71:E6:7F:C1:7B:F2:7F:2B:7E
Certificate issuer: /CN=83375b43ae8a53d48c888671e67fc17bf27f2b7e
Certificate serial: 019357D282F0F8DDF3D245DB972563894A07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gzdbQ66KU9SMiIZx5n_Be_J_K34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/192bba-1a74-4ba4-90d6-72c4c4b804a7/1/gzdbQ66KU9SMiIZx5n_Be_J_K34.mft
Manifest number: 1370
Signing time: Sat 23 Nov 2024 07:00:34 +0000
Manifest this update: Sat 23 Nov 2024 07:00:34 +0000
Manifest next update: Sun 24 Nov 2024 07:00:34 +0000
Files and hashes: 1: 6E_qFEnC7CGbjawkLQ5uJf_n1vE.roa (hash: drkG99qMNV7K8ZIyUQVMtp3yEP90A5j9xsoduxlVds8=)
2: RM0wb6gwaF-GKqo3HVsl2NGChs0.roa (hash: fYe120t0X7kEZRTgtTwPGIW6g/qVrAmTz8KoZdCYxks=)
3: gzdbQ66KU9SMiIZx5n_Be_J_K34.crl (hash: B/7gl3ONgMvVnoHX9/k9AE+W+8l5b0Nur+9U1sLh2j0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/192bba-1a74-4ba4-90d6-72c4c4b804a7/1/gzdbQ66KU9SMiIZx5n_Be_J_K34.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/192bba-1a74-4ba4-90d6-72c4c4b804a7/1/gzdbQ66KU9SMiIZx5n_Be_J_K34.mft
rsync://rpki.ripe.net/repository/DEFAULT/gzdbQ66KU9SMiIZx5n_Be_J_K34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:d2:82:f0:f8:dd:f3:d2:45:db:97:25:63:89:4a:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83375b43ae8a53d48c888671e67fc17bf27f2b7e
Validity
Not Before: Nov 23 07:00:34 2024 GMT
Not After : Nov 24 07:00:34 2024 GMT
Subject: CN=b39abe908ae1b3afe14b4b7fae0052b6ebe96079
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:20:84:14:5e:f5:27:bf:1b:26:ba:82:da:14:
1d:c7:32:1b:10:2e:b5:35:d4:8e:f2:15:5c:fe:4b:
90:43:66:8f:79:01:33:d8:dd:49:a3:21:0b:5f:0a:
90:b8:bb:3a:73:f6:92:54:bd:a6:5e:3e:c3:d6:8c:
5b:77:78:58:43:da:48:29:fc:03:1d:58:c3:0f:b8:
df:b0:ec:d9:93:32:55:e4:ad:ff:41:10:ee:af:e9:
47:5c:79:0a:3e:13:7c:4a:e1:10:25:18:31:29:7c:
4d:0d:72:ff:00:61:4d:ab:ef:09:9b:85:f4:8d:0f:
16:ca:5f:e0:04:78:f3:89:d0:d9:73:fd:e3:1f:ce:
a9:23:65:c3:be:18:53:a0:1f:48:d4:13:36:98:4d:
0c:e3:95:75:4b:93:30:ac:c2:53:d9:a8:7c:ea:aa:
86:37:ed:4e:a2:3c:a9:9a:6d:40:06:b1:24:60:93:
77:59:54:6d:90:7f:99:af:41:e4:72:a0:49:7a:bb:
05:e5:82:be:95:bc:a4:1d:ae:ee:fa:75:6f:75:2a:
ea:8b:9a:15:a9:29:f6:d8:1c:a2:0f:e8:ec:0c:5d:
0f:30:03:2d:06:bd:6c:44:2f:4f:64:35:07:2a:ac:
c8:44:de:82:9a:ca:91:91:10:9f:66:5d:de:69:09:
69:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:9A:BE:90:8A:E1:B3:AF:E1:4B:4B:7F:AE:00:52:B6:EB:E9:60:79
X509v3 Authority Key Identifier:
keyid:83:37:5B:43:AE:8A:53:D4:8C:88:86:71:E6:7F:C1:7B:F2:7F:2B:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzdbQ66KU9SMiIZx5n_Be_J_K34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/192bba-1a74-4ba4-90d6-72c4c4b804a7/1/gzdbQ66KU9SMiIZx5n_Be_J_K34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/192bba-1a74-4ba4-90d6-72c4c4b804a7/1/gzdbQ66KU9SMiIZx5n_Be_J_K34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:8a:9b:a0:40:c9:93:16:94:85:de:fc:17:c2:04:a0:c3:00:
86:af:c4:48:ae:29:10:b1:ea:0b:88:a3:24:d9:09:c9:ee:a9:
58:b8:76:7d:70:f7:76:2e:30:db:bb:16:4d:1f:07:c2:57:11:
89:57:72:a7:94:64:11:b3:38:c6:0e:1f:bd:14:1f:16:27:d2:
4f:73:29:8c:64:32:d4:46:43:b6:bd:49:5b:1b:48:75:74:5b:
7f:62:6e:65:9f:b9:34:56:98:df:60:07:e5:31:88:5e:67:f2:
91:fe:cd:b9:e7:83:61:da:5b:9f:ce:23:53:63:7a:60:c1:a4:
0d:0e:dc:0e:50:89:88:ee:cf:51:b2:ab:68:68:57:2d:46:ab:
12:9b:e0:1f:82:d9:30:a6:89:83:64:54:cf:12:d6:b0:ff:86:
b6:b0:75:8a:67:51:f9:f0:47:7e:27:d0:a0:a8:00:14:93:92:
d8:7d:67:71:45:ba:19:df:f0:f3:be:5b:05:38:94:c2:77:47:
a0:ed:a6:51:90:a2:65:9e:dd:0d:ec:3c:98:ec:25:b8:65:ca:
9b:d2:c6:28:ed:62:42:89:b0:a8:80:ae:9d:b9:db:05:df:c0:
b1:ea:45:d2:cb:e0:29:59:5f:19:1f:a8:bc:7b:8c:74:91:f4:
5e:15:5b:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNX0oLw+N3z0kXblyVjiUoHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzMzc1YjQzYWU4YTUzZDQ4Yzg4ODY3MWU2N2ZjMTdiZjI3
ZjJiN2UwHhcNMjQxMTIzMDcwMDM0WhcNMjQxMTI0MDcwMDM0WjAzMTEwLwYDVQQD
EyhiMzlhYmU5MDhhZTFiM2FmZTE0YjRiN2ZhZTAwNTJiNmViZTk2MDc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApSCEFF71J78bJrqC2hQdxzIbEC61
NdSO8hVc/kuQQ2aPeQEz2N1JoyELXwqQuLs6c/aSVL2mXj7D1oxbd3hYQ9pIKfwD
HVjDD7jfsOzZkzJV5K3/QRDur+lHXHkKPhN8SuEQJRgxKXxNDXL/AGFNq+8Jm4X0
jQ8Wyl/gBHjzidDZc/3jH86pI2XDvhhToB9I1BM2mE0M45V1S5MwrMJT2ah86qqG
N+1Oojypmm1ABrEkYJN3WVRtkH+Zr0HkcqBJersF5YK+lbykHa7u+nVvdSrqi5oV
qSn22ByiD+jsDF0PMAMtBr1sRC9PZDUHKqzIRN6CmsqRkRCfZl3eaQlpVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLOavpCK4bOv4UtLf64AUrbr6WB5MB8GA1UdIwQY
MBaAFIM3W0OuilPUjIiGceZ/wXvyfyt+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3pkYlE2NktVOVNNaUlaeDVuX0JlX0pfSzM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8xOTJiYmEtMWE3NC00YmE0LTkwZDYt
NzJjNGM0YjgwNGE3LzEvZ3pkYlE2NktVOVNNaUlaeDVuX0JlX0pfSzM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC8xOTJiYmEtMWE3NC00YmE0LTkwZDYtNzJjNGM0YjgwNGE3
LzEvZ3pkYlE2NktVOVNNaUlaeDVuX0JlX0pfSzM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgIqboEDJ
kxaUhd78F8IEoMMAhq/ESK4pELHqC4ijJNkJye6pWLh2fXD3di4w27sWTR8HwlcR
iVdyp5RkEbM4xg4fvRQfFifST3MpjGQy1EZDtr1JWxtIdXRbf2JuZZ+5NFaY32AH
5TGIXmfykf7NueeDYdpbn84jU2N6YMGkDQ7cDlCJiO7PUbKraGhXLUarEpvgH4LZ
MKaJg2RUzxLWsP+GtrB1imdR+fBHfifQoKgAFJOS2H1ncUW6Gd/w875bBTiUwndH
oO2mUZCiZZ7dDew8mOwluGXKm9LGKO1iQomwqICunbnbBd/AsepF0svgKVlfGR+o
vHuMdJH0XhVbkw==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:41:24 2024 by rpki-client on console-ams.rpki-client.org